MicroDicom DICOM Viewer Memory Corruption Vulnerability in mDicom.exe

Vulnerability

A critical memory corruption vulnerability has been identified in MicroDicom DICOM Viewer version 2025.1 Build 3321. The issue arises from an unknown function in the file mDicom.exe, where improper handling of input leads to memory corruption. This vulnerability requires local access to exploit.

Impact

Exploitation of this vulnerability causes a memory access violation, which is a type of access violation error indicating illegal memory access, such as accessing memory outside of allocated boundaries or dereferencing null pointers.

Remediation

Users are advised to upgrade to the latest beta version of MicroDicom DICOM Viewer, which is available for download on the MicroDicom website.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
10.0
exploitability
4.6
remediation
7.7
relevance
0.0
threat
6.4
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.